Re: [opencryptoki-users] help on pkcs11 talking to tpm chip

[Sanjay S. <san...@gm...>]

I just tried setting the SO pin and I get the following message:

~:# pkcsconf -c 0 -P
Enter the SO PIN: ********
Enter the new SO PIN: **********
Re-enter the new SO PIN: **********
Error setting PIN: 0x6

-Sanjay

On Nov 13, 2007 7:22 PM, Steven Bade <sb...@au...> wrote:

> Have you set the SO Pin?
> Sanjay Sha wrote:
> > Hi,
> >
> > I am trying to talk to the TPM chip using the pkcs11 interface.
> > When I try changing the user PIN, I get the following error.
> >
> > ~:# pkcsconf -c 0 -p
> > Enter user PIN: *****
> > Enter the new user PIN: ********
> > Re-enter the new user PIN: ********
> > Error logging in: 0x102
> >
> > Can you please help...
> >
> > FYI
> > pkcs11_startup, populates the following entries in the pk_config_data.
> >
> > TRUE|0|Linux 2.6.22-gg14-generic Linux (TPM)|Linux
> >
> 2.6.22-gg14-generic|TRUE|FALSE|TRUE|0|0|1|1|NONE|libpkcs11_tpm.so|ST_Initialize
> > TRUE|0|Linux 2.6.22-gg14-generic Linux (Soft)|Linux
> >
> 2.6.22-gg14-generic|TRUE|FALSE|FALSE|0|0|1|1|NONE|libpkcs11_sw.so|ST_Initializ
> >
> > Also, I could run pkcsconf -c 0 -I command to intialize the token, and
> > pkcsconf -c 0 -u,  to initialize the user PIN.
> >
> > pkcsconf -ts output:
> >
> > Slot #0 Info
> >         Description: Linux 2.6.22-gg14-generic Linux (TPM)
> >         Manufacturer: Linux 2.6.22-gg14-generic
> >         Flags: 0x5 (TOKEN_PRESENT|HW_SLOT)
> >         Hardware Version: 0.0
> >         Firmware Version: 1.1
> >
> > Token #0 Info:
> >         Label: tpm
> >         Manufacturer: IBM Corp.
> >         Model: TPM v1.1 Token
> >         Serial Number: 123
> >         Flags: 0x880445
> >
> (RNG|LOGIN_REQUIRED|CLOCK_ON_TOKEN|TOKEN_INITIALIZED|USER_PIN_TO_BE_CHANGED|SO_PIN_TO_BE_CHANGED)
> >         Sessions: -1/-1
> >         R/W Sessions: -1/-1
> >         PIN Length: 6-127
> >         Public Memory: 0xFFFFFFFF/0xFFFFFFFF
> >         Private Memory: 0xFFFFFFFF/0xFFFFFFFF
> >         Hardware Version: 1.0
> >         Firmware Version: 1.0
> >         Time: 09:28:20
> >
> >
> > Thank you,
> > Sanjay
> >
> > --
> > 49:02:1f:d9:d5:10:98:58:12:af:56:e4:f1:34:cf:7e -Sunj
> > www.sanjaysha.com <http://www.sanjaysha.com>
> >
> >
> > ------------------------------------------------------------------------
> >
> >
> -------------------------------------------------------------------------
> > This SF.net email is sponsored by: Splunk Inc.
> > Still grepping through log files to find problems?  Stop.
> > Now Search log events and configuration files using AJAX and a browser.
> > Download your FREE copy of Splunk now >> http://get.splunk.com/
> >
> >
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > opencryptoki-users mailing list
> > ope...@li...
> > https://lists.sourceforge.net/lists/listinfo/opencryptoki-users
>
>


-- 
49:02:1f:d9:d5:10:98:58:12:af:56:e4:f1:34:cf:7e -Sunj
www.sanjaysha.com